EC-Council Certified DevSecOps Engineer (ECDE)

• Understanding of basic DevOps workflows and tools
• Familiarity with software development lifecycle (SDLC)
• Knowledge of application security principles is helpful

Audience

• DevOps engineers
• Application security professionals
• Software developers integrating security into pipelines

EC-Council Certified DevSecOps Engineer (ECDE) is a hands-on course designed to equip professionals with the skills to embed security across the DevOps lifecycle, enabling secure software development from planning to deployment.

This instructor-led, live training (online or onsite) is aimed at intermediate-level software and DevOps professionals who wish to integrate security practices into CI/CD pipelines, ensuring secure and compliant code delivery.

By the end of this training, participants will be able to:

• Understand the principles and practices of DevSecOps.
• Secure every stage of the CI/CD pipeline using automated tools.
• Implement secure coding practices and vulnerability scanning.
• Prepare for the ECDE certification with practical labs and review.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of DevSecOps tools in simulated pipelines.
• Guided exercises focused on secure development and deployment.

Course Customization Options

• To request a customized training for this course based on your team’s workflows or toolchain, please contact us to arrange.

Introduction to DevSecOps and ECDE Framework

• DevSecOps fundamentals and principles
• Security challenges in DevOps environments
• Overview of the ECDE exam and domains

Secure DevOps Culture and Mindset

• Security as a shared responsibility
• Shifting security left in the SDLC
• Stakeholder alignment and team roles

Integrating Security in CI/CD Pipelines

• Securing Jenkins, GitLab CI, and Azure DevOps pipelines
• Secrets management and environment configuration
• Secure container builds and image scanning

Application Security in DevSecOps

• Static and dynamic application security testing (SAST/DAST)
• Open-source dependency scanning (SCA tools)
• Secure code review and coding practices

Infrastructure as Code and Cloud Security

• Securing Terraform, Ansible, and Kubernetes configurations
• IAM and policy-as-code
• DevSecOps in hybrid/multi-cloud environments

Monitoring, Compliance, and Incident Readiness

• Security monitoring and logging in CI/CD
• Compliance automation (e.g., NIST, ISO, SOC 2)
• Automated remediation and incident response workflows

ECDE Exam Preparation and Final Lab

• ECDE exam structure and preparation tips
• Capstone DevSecOps pipeline lab
• Knowledge checks and readiness assessment

Summary and Next Steps